If you are using Blockchain.info please use 2FA - in the event that someone gets into your email and has the necessary information to log in, the only thing stopping them is 2FA. If you are keeping you're wallet on that same email address, use 2FA for that email address as well if possible. Better to be safe than sorry.
Unfortunately, I have it on mobile as well, which doesn't support 2FA, at least for windows phone. I do use a password generator, and this is a sample password that it would give me: IG'H})ZKDBLis9aHBw?!r8XiPFfY Think i'm pretty safe. Will consider 2FA if I have significant funds in there.